search

nodeshift-archived / license-reporter

license-reporter is a tool that gathers licenses for project's dependencies and produces a output in XML, JSON, YAML and HTML format.
Apache License 2.0
13 stars 10 forks source link

investigate and remove unused devDependency ink-docstrap #285

Closed helio-frota closed 6 years ago

helio-frota commented 6 years ago

probably is the cause of this vulnerability related to the moment dependency.

"ink-docstrap": {
      "version": "1.3.0",
      "resolved": "https://registry.npmjs.org/ink-docstrap/-/ink-docstrap-1.3.0.tgz",
      "integrity": "sha1-6QBeW7kCXMmpvo5ErYf4rViIyB0=",
      "dev": true,
      "requires": {
        "moment": "2.18.1",
        "sanitize-html": "1.14.1"
      }
    },

screenshot from 2018-03-05 16-13-18